HOR-4017 CLONE 3.2.2 - Unauthenticated download of any file from server with "processes/processes_GetFile" page + Path Traversal

- Add validation path only PATH_DATA_MAILTEMPLATES or PATH_DATA_PUBLIC

gulliver/system/class.rbac.php

@@ -181,6 +181,10 @@ class RBAC
                 'DEL' => ['PM_SETUP'],
                 'LST' => ['PM_SETUP'],
                 'TEST' => ['PM_SETUP']
+            ],
+            'processes_GetFile.php' => [
+                'mailTemplates' => ['PM_FACTORY'],
+                'public' => ['PM_FACTORY']
             ]
         ];
         $this->aliasPermissions['PM_CASES'] = [self::PM_GUEST_CASE];